Proton Mail

• Analyzed: May 12, 2026, 4:12 AM
• Findings: 1
• Version: 1.0.1
• Hash: b8c91e5a09341cd12a2954af4e237c750f7ebcb4f067a12ba7d0e8d43ea32639
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed for ProtonMail automation using Playwright, which is a legitimate purpose. However, it includes instructions for installing system dependencies using `sudo apt-get install` and launches Chromium with `--no-sandbox` and `--disable-setuid-sandbox` flags. While these might be necessary for certain environments or to bypass bot detection, they significantly weaken the security posture of the host system by disabling critical browser sandboxing and requiring elevated privileges for installation. These are serious vulnerabilities that could be exploited, classifying the skill as suspicious rather than benign, despite no direct evidence of intentional malicious data exfiltration or unauthorized remote control in the provided code snippets or instructions.